Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/553aa973-ba52-3c4b-9d9d-ff8d022d03ee.roa
File: 553aa973-ba52-3c4b-9d9d-ff8d022d03ee.roa (raw, json)
Hash identifier: SdV7h0GM1zt5ZJXNVd14u9iwA6yQI97DjMLcgISO+SE=
Subject key identifier: E5:B1:EA:64:D3:F2:AA:7C:33:68:08:5C:E8:AC:96:47:66:76:A5:F5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F79668992443515E649B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/553aa973-ba52-3c4b-9d9d-ff8d022d03ee.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.54.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:96:68:99:24:43:51:5e:64:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=a644cd48-28dc-43b9-ad4a-ed3e7da18e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:14:10:f2:84:45:74:9b:fe:54:c9:36:89:
18:85:53:14:07:c7:28:eb:46:c6:bf:b6:67:29:df:
53:06:4c:6c:12:a3:63:b2:d4:9d:8b:f2:fa:44:14:
a1:17:9e:d2:36:83:3a:a5:66:14:61:0e:eb:1e:ea:
d8:f5:b4:5d:37:be:59:45:83:4d:56:7f:d6:b2:6a:
63:59:13:6a:34:95:b5:60:64:51:48:60:74:81:cc:
88:e4:74:b9:ba:e4:1e:59:81:40:c7:1c:92:e4:2b:
42:54:62:d3:87:a8:af:f2:ac:4c:75:80:05:ec:c5:
42:aa:ad:2b:53:67:65:63:ae:6d:c4:36:5d:1a:e8:
3e:96:3b:41:8c:22:82:d3:1a:c3:c0:54:02:59:38:
0e:8f:94:7e:83:09:01:e1:01:ac:cb:0e:66:f7:f6:
09:14:91:51:a0:05:9b:45:7d:0d:69:e1:6a:10:f4:
3d:ed:cd:d5:78:de:be:53:97:c0:a6:48:35:8f:f7:
02:33:cd:1d:52:18:ef:75:8d:52:ed:0b:a7:7b:2a:
cb:19:d3:0f:7d:5a:0b:8f:6e:ed:61:b9:51:a0:ac:
4f:ad:20:57:a5:70:93:2f:12:4d:ff:11:d5:4d:81:
0e:c3:9e:7b:96:20:a9:70:84:eb:f9:97:ba:c8:82:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B1:EA:64:D3:F2:AA:7C:33:68:08:5C:E8:AC:96:47:66:76:A5:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/553aa973-ba52-3c4b-9d9d-ff8d022d03ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.54.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:b2:d2:cf:38:ad:fa:1f:0f:b2:b5:6f:22:16:3f:f8:38:51:
52:eb:25:e9:23:88:3b:dd:dd:1a:62:a0:9d:03:d5:0e:00:3f:
13:31:83:63:0a:49:4f:c3:6e:f4:89:5d:cf:57:90:cc:47:e9:
a2:37:cc:90:76:2e:71:64:c2:29:ea:4d:be:6a:32:be:10:5f:
3e:98:19:c9:83:1a:6b:3a:4d:10:31:5e:0b:b4:b7:58:4e:5f:
62:19:f3:b9:9d:fc:8f:c2:ae:61:c3:5e:73:57:ed:68:74:9b:
7e:8a:73:f2:ce:89:e8:07:85:b9:3a:00:8c:8d:47:1f:6c:c2:
b7:8c:3c:41:6b:89:a2:e5:fe:fa:14:d9:66:51:14:4b:ca:e8:
72:72:93:68:d7:78:2b:c5:56:fc:15:00:64:e3:58:f6:d2:95:
8e:12:25:e3:93:c0:b7:b0:7a:1f:09:15:49:f8:7e:d5:2c:f6:
9b:ab:37:bd:66:86:28:b0:a9:97:ca:e3:cf:f7:a3:9e:12:c6:
36:0f:48:41:d3:0c:ed:98:fa:2b:be:c6:98:0c:f5:98:dc:d2:
d8:ce:7b:fa:c7:d1:42:2e:ec:a7:e1:42:7a:25:f7:96:91:83:
43:90:07:13:b8:73:60:c9:f3:a6:c7:49:6b:1f:72:d4:b7:17:
ae:c7:62:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj095ZomSRDUV5kmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
YTY0NGNkNDgtMjhkYy00M2I5LWFkNGEtZWQzZTdkYTE4ZTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEkUEPKERXSb/lTJNokYhVMUB8co60bGv7Zn
Kd9TBkxsEqNjstSdi/L6RBShF57SNoM6pWYUYQ7rHurY9bRdN75ZRYNNVn/Wsmpj
WRNqNJW1YGRRSGB0gcyI5HS5uuQeWYFAxxyS5CtCVGLTh6iv8qxMdYAF7MVCqq0r
U2dlY65txDZdGug+ljtBjCKC0xrDwFQCWTgOj5R+gwkB4QGsyw5m9/YJFJFRoAWb
RX0NaeFqEPQ97c3VeN6+U5fApkg1j/cCM80dUhjvdY1S7QuneyrLGdMPfVoLj27t
YblRoKxPrSBXpXCTLxJN/xHVTYEOw557liCpcITr+Ze6yIItGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOWx6mTT8qp8M2gIXOislkdmdqX1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTUzYWE5NzMtYmE1Mi0z
YzRiLTlkOWQtZmY4ZDAyMmQwM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDYIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6y0s84rfofD7K1byIWP/g4UVLrJekjiDvd3RpioJ0D1Q4APxMxg2MK
SU/DbvSJXc9XkMxH6aI3zJB2LnFkwinqTb5qMr4QXz6YGcmDGms6TRAxXgu0t1hO
X2IZ87md/I/CrmHDXnNX7Wh0m36Kc/LOiegHhbk6AIyNRx9swreMPEFriaLl/voU
2WZRFEvK6HJyk2jXeCvFVvwVAGTjWPbSlY4SJeOTwLeweh8JFUn4ftUs9purN71m
hiiwqZfK48/3o54SxjYPSEHTDO2Y+iu+xpgM9Zjc0tjOe/rH0UIu7KfhQnol95aR
g0OQBxO4c2DJ86bHSWsfctS3F67HYnM=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:32:46 2025 by rpki-client